Under the Act, KRA is a data controller with access to the personal information of over 4.4 million people. They are bound by the Act to process personal data only in ways that respect the public’s right to privacy. Only a third of Kenyans are aware of the Data Protection Act. The findings must catalyse a sense of urgency for intensive civic education among the public, state, and business agencies. Despite KRA’s misstep this week, the new law and independent Data Protection Office places Kenya well ahead of several African countries.

Source: Standard Digital May 16, 2021 15:25 UTC